Hacker Newsnew | past | comments | ask | show | jobs | submit | more sorpaas's commentslogin

That's for deleting apps, since docker volumes may produce something that only root can access. Haven't found ways to get around it, any suggestions?


I assume you mean data outside the container?

Maybe you could at least silo the utility that needs to delete so that it can easily be inspected and so you don't have to trust the whole program.


Exactly. A setuid `delort-container` utility would be a good start.


Also Chinese here, GFW is really a shame for us.


This national capital has already been set up since 2009, so there's not so much new things about it.

If you can read Chinese, here's some "inner people" commenting about it: http://www.zhihu.com/question/24838323


Why you need permission to see my twitter password and post on behalf of me?


Sorry I'm a bit late.

No. It's not possible to guess someone else's article (I guess you probably mean reading records here). Those reading records must be get or set with a cookie that indicate the user has logged in with the right account (which is done by ajax in the code).


It looks to me that the url that calls queries_read_records.like_article() only requires a logged in user and a record id in order to set a read record as liked? Are you saying that is not possible to guess the id because it's not a sequential number by default in mongodb?


The article id is public (they are public on the Internet anyway). But it's not possible (at least as designed) to access any user-specific information if not logged in.


I'm not talking about an information leak I'm talking about a potential denial of liking attack ☺


I'm really surprised that so many people are still just talking about it in an economic prospective. I'm not talking about Human Rights or Freedom because the government don't event accept them. I just want to surf the Internet.

Currently it works well because we get more and more tools to deal with GFW, but do you know how frustrating it is in the early days of the Internet in China that you spent nearly half of your life just to solve "networking issues"?

Put yourself in others' shoes for a moment please.


Thank you Microsoft!


It seems to mean go back from the committer to the project that is funded, not tip4commit's coffers.


yes, that's right, thanks!


Neither do I. Still no invitation yet.


Why we again treat our mail box as a GTD list? Isn't it more convenient to use a fully functional GTD task manager such as org mode?


Email notifications are universal. Many disparate services all can push out transactional emails, which are then aggregated in one place.

To replace email, you would need to create something which is as universally adopted. Good luck!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: